diff options
| author | Dylan Hardison <dylan@mozilla.com> | 2015-11-05 06:28:14 +0100 |
|---|---|---|
| committer | Dylan Hardison <dylan@mozilla.com> | 2015-11-05 06:28:14 +0100 |
| commit | 534fc2123e40b7517aeaffd709faf72af97ac3b8 (patch) | |
| tree | 18ad69c8fb22e213ee3256c0768e35dd964d2156 /extensions/GitHubAuth/template/en/default/hook/global/code-error-errors.html.tmpl | |
| parent | 67d9618771441215d8c431b81bf66acd4faa2aa1 (diff) | |
| download | bugzilla-534fc2123e40b7517aeaffd709faf72af97ac3b8.tar.gz bugzilla-534fc2123e40b7517aeaffd709faf72af97ac3b8.tar.xz | |
Bug 1196743 - Fix information disclosure vulnerability that allows attacker to obtain victim's GitHub OAuth return code
Diffstat (limited to 'extensions/GitHubAuth/template/en/default/hook/global/code-error-errors.html.tmpl')
| -rw-r--r-- | extensions/GitHubAuth/template/en/default/hook/global/code-error-errors.html.tmpl | 12 |
1 files changed, 7 insertions, 5 deletions
diff --git a/extensions/GitHubAuth/template/en/default/hook/global/code-error-errors.html.tmpl b/extensions/GitHubAuth/template/en/default/hook/global/code-error-errors.html.tmpl index 5f6672e2b..aaf9b6fa3 100644 --- a/extensions/GitHubAuth/template/en/default/hook/global/code-error-errors.html.tmpl +++ b/extensions/GitHubAuth/template/en/default/hook/global/code-error-errors.html.tmpl @@ -6,11 +6,7 @@ # defined by the Mozilla Public License, v. 2.0. #%] -[% IF error == "github_invalid_state" %] - [% title = "Invalid State Parameter" %] - An invalid <em>state</em> parameter was passed to the GitHub OAuth2 callback. - -[% ELSIF error == "github_missing_code" %] +[% IF error == "github_missing_code" %] [% title = "Missing GitHub Auth Code" %] Expected a <em>code</em> parameter in the GitHub OAuth2 callback. @@ -22,4 +18,10 @@ [% title = "GitHub Error" %] GitHub returned an error: [% response.message FILTER html %] +[% ELSIF error == "github_invalid_target" %] + [% terms.Bugzilla %] cannot log you into an external site via GitHub. + +[% ELSIF error == "github_invalid_request" %] + Invalid GitHub log in attempt (reason: [% reason FILTER html %]) + [% END %] |